⚖️ MonnaieNumer
OSINT File – Report of Scam TON / Telegram
Identity theft of @monnaienumer
Date: June 15, 2025
---
1. GENERAL INFORMATION
Complainant: MonnaieNumer (independent OSINT entity)
Email: [email protected]
Telegram: @monnaienumer
Location: Senegal
---
2. OBJECT OF THE REPORT
Report of a crypto fraud exploiting the TON blockchain, Telegram bots, a fraudulent link fragment.com, and an active TON wallet.
The identity @monnaienumer has been impersonated for scamming purposes.
---
3. SCAM DETAILS
- Impersonated Telegram handle: @monnaienumer
- Fraudulent link: https://fragment.com/username/ton_boost
- Scammer: displayed name “Willian” (cartoon photo – meme “man throwing money”)
- Bot used: @directnotifybot
- TON address: Uf_BbsF1...LShiscNK
- Scenario used: request for humanitarian aid for a “blind cat,” via TON link
- Estimated amount stolen: ~1.3 million USD
- Probable location of the scammer: Bibipur Extension, Lucknow (IN), via OSINT network analysis
- Infrastructure used: AWS servers + Cloudflare CDN
---
4. ATTACHED EVIDENCE
- Telegram captures and fragment link
- Screenshots of the active TON wallet
- AWS + Cloudflare IP resolution
- OSINT investigation timeline
- Fraudulent Telegram profile
- Activity logs (Telegram status, messages)
---
5. REQUESTS TO CHAINABUSE
1. Public registration of the fraudulent TON wallet
2. Marking the fragment link as scam/phishing
3. Communication with AWS and Cloudflare
4. Technical coordination for CERT / partner escalation
5. Connecting with other analysts / victims
---
6. COMPLAINANT'S STATEMENT
I, the undersigned, MonnaieNumer, acting within the framework of digital citizen monitoring and cybersecurity, certify that the attached information has been collected legitimately, for the purpose of protecting internet users.
